Two-Factor Authentication for Pulse Connect Secure SSL VPN with Duo

VPNGoupCom Herkes çevrimiçi güvenlik ve gizlilik https://vpngoup.com konusunda endişe ve kişisel bilgilerini ve tarama alışkanlıkları ortaya istemiyoruz, VPN harika bir çözüm

 

(upbeat instrumental songs) – [Teacher] Hi, I'mMatt from Duo Security.

Within this movie I'm going to explain to you how to safeguard your PulseConnect Safe SSL VPN with Duo.

You should definitely reference the documentation for this configuration atduo.

com/docs/pulseconnect.

Before beginning the setup method, Make certain that Duo iscompatible with all your Pulse VPN.

Go online on your administrator Website interface and validate that yourfirmware is Edition eight.

two.

Additionally, you should Have got a useful Major authentication configuration for the SSL VPN buyers, like LDAP authenticationto active directory.

(upbeat instrumental new music) Log in to your Duo admin panel.

(upbeat instrumental audio) Within the left side bar, click on purposes.

Simply click “Guard anapplication” and type juniper within the look for bar.

Beneath the entry for Juniper SSL VPN, simply click shield this application.

Your integration key, secretkey, and API host name are furnished at the topof the properties website page.

You'll need these later all through setup.

Click the url to downloadthe Duo Juniper 8.

x deal.

This file is personalized in your account and has your Duo account IDappended towards the file title.

Note that Duo's Juniper configuration is appropriate with Pulse Connect Safe and you may alter the displayname of this application at the bottom of the Homes webpage.

For straightforward reference, changethe name of this software to Pulse Connect Safe VPN.

(upbeat instrumental audio) Simply click save modifications.

(upbeat instrumental music) Now modify the register site.

Log in in your Pulse Link Protected administrator web interface.

(upbeat instrumental new music) In the very best menu, navigateto authentication, signing in, check in pages.

(upbeat instrumental music) Click add custom web pages.

(upbeat instrumental songs) In the title discipline, style Duo.

Established web page type to Accessibility.

(upbeat instrumental audio) Beside templates file, simply click Browse and select the Duo Juniper zip file you downloaded with the admin panel.

Usually do not pick the “use personalized webpage for Pulse desktop customer logon” or “prompt the secondary qualifications on the second website page” selections, Should they be current.

Test the skip validationchecks all through upload box.

Simply click upload custom made web pages.

You could ignore any warnings that seem.

Subsequent incorporate the Duo LDAP server.

Open a brand new browser window and navigate to duo.

com/docs/pulseconnect.

(upbeat instrumental music) Scroll all the way down to the “Add theDuo LDAP Server” portion with the documentation.

You will find strings you cancopy from this part to make set up much easier.

(upbeat instrumental audio) In the very best menu of youradministrator interface, navigate to authentication, auth servers.

(upbeat instrumental music) While in the auth server typelist, pick out LDAP server.

Click new server.

(upbeat instrumental audio) During the title subject, kind Duo-LDAP.

Inside the LDAP server subject, enter your API hostname from the application’s Homes web page during the Duo admin panel.

(upbeat instrumental songs) Set the LDAP port to 636.

(upbeat instrumental music) During the LDAP server typedrop down, pick generic.

Next to link, clickthe radio button for LDAPS.

Within the authentication demanded part, Look at the “authenticationrequired to go looking LDAP” box.

(upbeat instrumental tunes) Duplicate the admin DN stringfrom the documentation page and paste it while in the admin DN field in the heartbeat Safe web interface.

(upbeat instrumental tunes) Switch the integrationunderscore vital variable together with your integration vital.

(upbeat instrumental tunes) Then duplicate your solution vital and paste it while in the password discipline.

Within the getting person entries portion, copy the string you utilised inthe admin DN part higher than and paste it in The bottom DN field.

(upbeat instrumental audio) Then copy the filter fromthe documentation website page and paste it in the filterfield in the online interface.

(upbeat instrumental new music) Simply click conserve.

(upbeat instrumental music) Once you simply click help you save, youmight receive a message indicating that the LDAPserver is unreachable.

It is possible to disregard this information.

Now you might want to configure a person realm for your Duo LDAP server.

To perform this, you cancreate a brand new realm for screening, produce a realm to graduallymigrate end users in The brand new procedure, or utilize the default people realm.

For this online video, We've got previously made a Duo users group that we are going to configure to make use of Duo for secondary authentication.

Inside your VPN interface, navigate to users, person realms, and click the website link with the user realm you should include secondary authentication to.

Underneath the additionalauthentication servers area, decide on the “empower additionalauthentication server” checkbox.

(upbeat instrumental tunes) From the authentication quantity two discipline, choose Duo-LDAP.

Close to person name is, pick the radio button for predefined as and enter if It is far from already existing.

(upbeat instrumental audio) Next to password is, find the button for specified by user on sign in page.

(upbeat instrumental music) Test the box for “endsession if authentication towards this server fails”.

(upbeat instrumental audio) Simply click help you save changes.

(upbeat instrumental songs) Click on the authentication policy tab at the highest from the pageand then click password.

(upbeat instrumental songs) In the selections for the additional authentication server portion, pick “permit all people”.

Simply click preserve variations.

(upbeat instrumental tunes) To finish putting together your integration, configure a register policyfor secondary authentication.

In this instance We are going to use the default asterisk slash URL coverage, but you can build a fresh sign up coverage at a tailor made URL like asteriskslash Duo-testing for screening.

In the best menu, drop by authentication, signing in, sign up procedures.

(upbeat instrumental songs) Simply click the backlink for that check in policy that you want to switch.

During the register webpage checklist, pick Duo.

(upbeat instrumental tunes) From the authentication realm segment, pick out the radio button for “consumer picks from a listing of authentication realms”.

Choose the user realmyou configured before and click increase.

Ensure This is actually the only picked realm for this sign up web page.

Simply click help save improvements.

(upbeat instrumental tunes) With every thing configured, now it is time to test your setup.

With your browser, navigate to the URL that you just defined for your personal register policy.

(upbeat instrumental new music) Once you complete Major authentication, the Duo Prompt appears.

Applying this prompt, people can enroll in Duo or full two-aspect authentication.

Due to the fact this consumer has alreadybeen enrolled in Duo, you are able to decide on mail me a drive, contact me, or enter a passcode.

Select “send me a press” tosend a Duo push notification on your smartphone.

On your own mobile phone, open the notification, tap the inexperienced button toaccept, and you're logged in.

You have efficiently set upDuo two-variable authentication for you personally Pulse Hook up Secure VPN.

(upbeat instrumental new music).